Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
File: RYzFKgcHzDQKycf26QKLZLcCZ7w.mft (raw, json)
Hash identifier: rUmwyATOfFJhHlPPlet1VqwEGTrMOllM/Q/qKtBbvak=
Subject key identifier: 0C:D2:3F:F3:4F:0A:97:47:40:81:39:6B:AE:75:DF:D1:61:E8:F5:84
Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
Certificate issuer: /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Certificate serial: 01A0DC4D659B5214862B03E735D1C9B2DD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
Manifest number: 0BCB
Signing time: Sat 26 Sep 2026 06:00:54 +0000
Manifest this update: Sat 26 Sep 2026 06:00:54 +0000
Manifest next update: Sun 27 Sep 2026 06:00:54 +0000
Files and hashes: 1: Q3uvcJk1aivu7ToH0eZwM2MePrY.roa (hash: j0i6DOSkvpYiLwStrAAsU53hjHyyfEDy63fjeik32sA=)
2: QBmUJCRtL8qMx8nsM_8h7M8Ntmk.roa (hash: oRqg090yxLTopHF59OGl/QFkoOTyNIVLSNChAWZxm8c=)
3: RYzFKgcHzDQKycf26QKLZLcCZ7w.crl (hash: 4RYEdJ6HnwXX6URe0abi7pvn3DQEMPRRnDVimwO5FSg=)
4: _6K6ekLgN63ACFr7Nc4QqX8mO9Q.roa (hash: GR7VM23RiAdX5cDnkEi212fYKZ9tRoD66kVKX08kLSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:65:9b:52:14:86:2b:03:e7:35:d1:c9:b2:dd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Validity
Not Before: Sep 26 06:00:54 2026 GMT
Not After : Sep 27 06:00:54 2026 GMT
Subject: CN=0cd23ff34f0a97474081396bae75dfd161e8f584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:70:69:25:e9:1d:35:c5:a7:9a:93:86:e1:
90:02:0b:36:81:a4:2b:77:65:b1:9c:4e:e0:ba:5f:
9e:c5:26:4c:29:31:c4:8f:a8:71:c6:f4:cc:70:98:
ab:32:c1:e2:54:67:fe:59:36:cd:d8:ab:ec:67:50:
34:50:00:ee:26:f8:0a:6f:35:74:13:8e:28:24:35:
1c:e2:c8:f2:7d:38:e1:0a:c9:7a:16:15:a2:cb:d9:
3a:70:29:e7:f5:fd:4c:24:99:85:55:0b:2f:59:1a:
e0:dc:9f:b8:97:71:f5:40:c5:20:86:5c:c5:9b:bc:
bb:4d:14:a7:6b:a5:1d:e9:35:e1:7a:82:29:10:02:
27:7b:99:fb:26:bf:8d:3a:a9:5e:e8:5a:23:3c:85:
5a:c3:92:d0:5e:3b:1a:0d:f4:a2:53:37:01:b4:4e:
6c:5a:36:fc:33:8b:c0:3d:be:d4:72:04:4b:c6:97:
25:2b:80:29:6a:b0:38:a5:c8:41:d6:36:2f:c5:cf:
db:52:05:18:b2:62:b2:3e:7e:6f:11:32:cb:20:5a:
1d:a9:c1:a1:1a:24:18:d4:1c:5c:13:fa:99:7b:2e:
6a:36:bc:55:71:ef:d0:81:c2:6e:f3:87:d9:9d:5f:
4a:88:6c:76:a7:be:26:c0:03:6d:a4:cf:ce:a2:1b:
38:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D2:3F:F3:4F:0A:97:47:40:81:39:6B:AE:75:DF:D1:61:E8:F5:84
X509v3 Authority Key Identifier:
keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5c:92:c8:ab:f1:7a:c3:ae:41:40:c5:d9:4e:05:6d:4b:8d:
32:23:6a:37:32:46:5c:64:37:c0:40:e1:72:e2:af:14:8b:00:
c3:db:06:10:21:4b:b4:89:71:44:f1:a4:d6:d3:57:32:80:f4:
5c:87:b9:4c:69:d9:83:65:27:a1:f8:19:ca:8a:9e:d3:bc:4a:
a9:28:78:2f:e5:62:5a:22:74:6e:19:46:64:9b:e1:36:ce:dc:
0f:1e:64:76:0e:7e:88:59:ce:6f:5d:f4:c3:22:57:01:58:6e:
af:77:73:62:35:ae:18:47:2c:d7:26:fb:58:32:e2:91:c5:7e:
7f:3a:e3:43:86:9f:47:fd:2c:65:95:45:8e:fd:96:4e:7b:6c:
e1:a1:01:4c:d4:d1:7f:9e:0f:75:30:19:ae:c3:61:62:47:f3:
65:5f:15:c4:f8:7f:cf:ee:1b:30:69:33:c4:ff:6f:33:4f:40:
e8:b7:8d:34:d0:0f:e4:46:bc:bb:17:84:dd:6f:ff:8a:a7:88:
74:c9:05:52:bc:6e:81:e6:d8:f2:39:d0:38:68:07:c6:f1:aa:
21:3b:c1:51:5a:72:ad:14:d1:2a:ec:c4:7c:91:42:a9:b5:dc:
71:19:e6:3a:c0:be:6f:87:23:6d:ea:fd:9b:4f:18:49:ae:41:
dc:13:35:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:26:04 2026 by rpki-client